Security Advisory

CVE-2018-20487

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-11 20:21:05

Last updated 2024-08-05 12:05:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.

← Browse all CVEs View on cve.org ↗